exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 2 question 88 discussion

Actual exam question from Microsoft's MS-101
Question #: 88
Topic #: 2
[All MS-101 Questions]

You have a Microsoft 365 E5 subscription that contains a user named User1.
The subscription has a single anti-malware policy as shown in the following exhibit.

An email message that contains text and two attachments is sent to User1. One attachment is infected with malware.
How will the email message and the attachments be processed?

  • A. Both attachments will be removed. The email message will be quarantined, and User1 will receive an email message without any attachments and an email message that includes the following text: ג€Malware was removed.ג€
  • B. The email message will be quarantined, and the message will remain undelivered.
  • C. Both attachments will be removed. The email message will be quarantined, and User1 will receive a copy of the message containing the original text and a new attachment that includes the following text: ג€Malware was removed.ג€
  • D. The malware-infected attachment will be removed. The email message will be quarantined, and User1 will receive a copy of the message containing only the uninfected attachment.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
VirtualJP
Highly Voted 3 years, 4 months ago
Selected Answer: C
After careful consideration and review of Anti-malware policy behaviour I too will go with C.
upvoted 7 times
...
us3r
Highly Voted 3 years, 4 months ago
Selected Answer: C
Recipient notifications: By default, a message recipient isn't told that a message intended for them was quarantined due to malware. But, you can enable recipient notifications in the form of delivering ****the original message***** with all attachments removed and replaced by a single file named Malware Alert Text.txt https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware-protection?view=o365-worldwide#anti-malware-policies
upvoted 6 times
...
psp65
Most Recent 2 years, 1 month ago
Selected Answer: A
I think that actually the only possible answer is A according to: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/quarantine-quarantine-notifications?view=o365-worldwide
upvoted 2 times
...
RenegadeOrange
2 years, 7 months ago
It says the message will be quarantined, the user just get's a notification. It does not say remove attachment and don't quarantine the email...
upvoted 2 times
...
Doinitza
2 years, 8 months ago
Outdated question, you cannot notify the recipient about a quarantined message with a single anti-malware policy: * The quarantine policy named NotificationEnabledPolicy is not present in all environments. You'll have the NotificationEnabledPolicy quarantine policy if your organization meets both of the following requirements: • Your organization existed before the quarantine policy feature was turned on (late July/early August 2021). • You had one or more anti-spam policies (the default anti-spam policy or custom anti-spam policies) where the Enable end-user spam notifications setting was turned on. Link: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/quarantine-policies?view=o365-worldwide#full-access-permissions-and-quarantine-notifications So, the right answer would be the “B”
upvoted 5 times
RenegadeOrange
2 years, 7 months ago
Agree question is also outdated so probably won't be in the exam in this format.
upvoted 2 times
...
...
TimNov
2 years, 11 months ago
If you read the question closely the message must first be released by an admin and this is never implied to be the case so I would say B.
upvoted 4 times
...
Goena
3 years, 5 months ago
I go for answer A. According the given link: Recipient notifications: By default, a message recipient isn't told that a message intended for them was quarantined due to malware. But, you can enable recipient notifications in the form of delivering the original message with all attachments removed and replaced by a single file named Malware Alert Text.txt that contains the text.
upvoted 3 times
Spacedust
3 years, 5 months ago
That sounds like answer C to me. Answer A will send 2 separate emails to the recipient
upvoted 5 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago